Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier: IUBiv7Q4mgXF+BegCHQvHQDk2UTluTExwl21PguXdo4=
Subject key identifier: D7:1B:C1:1B:9D:58:EC:3F:ED:55:B1:C7:70:88:E4:A3:54:10:E3:91
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial: 01A0C4E97D6646116BE23DE0FACF45F9674D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 17:00:31 +0000
Manifest this update: Mon 21 Sep 2026 17:00:31 +0000
Manifest next update: Tue 22 Sep 2026 17:00:31 +0000
Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: afe0f2WrTpY/A7EijmyCtdl8HgQLhgcVi3Xihk/6XV4=)
2: RV6tXj6W0nE7aN2FDSjnLLCyX9g.roa (hash: WdrE3hN0kAlM8z4J7L3E1iNI3SXMCvpVCPSlTiuP6e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:7d:66:46:11:6b:e2:3d:e0:fa:cf:45:f9:67:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Validity
Not Before: Sep 21 17:00:31 2026 GMT
Not After : Sep 22 17:00:31 2026 GMT
Subject: CN=d71bc11b9d58ec3fed55b1c77088e4a35410e391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b0:bc:78:9f:16:68:00:8c:c8:31:6d:29:0a:
b2:c2:aa:fe:f1:10:b1:8d:18:32:5c:e4:d1:e5:8c:
d3:f9:16:5c:e0:45:06:23:5b:2d:ea:d3:f0:db:cb:
aa:ce:92:bd:12:98:cb:ed:d5:80:b3:3a:99:7a:67:
01:d3:33:ae:9c:aa:ea:06:67:51:78:5e:62:91:9e:
81:b7:0b:4b:c1:4f:5f:0e:00:b5:73:91:0d:05:9d:
2c:90:c6:0a:c1:cd:50:37:69:60:0e:9b:ad:f9:52:
57:eb:b6:f8:5a:62:b3:32:d3:bb:6c:13:a2:4b:0a:
18:4c:4e:b1:5f:23:2c:3a:d3:73:dc:4e:bc:4c:e3:
bf:45:d4:f4:d3:f2:04:01:d1:8f:2e:51:00:5a:65:
c1:b5:61:88:c5:1c:34:0d:ed:33:1d:0d:60:a3:27:
88:3c:52:e8:e9:d9:af:b5:e9:0f:2a:03:92:f6:31:
9a:19:12:7f:10:29:17:e8:56:6c:fe:98:d3:8b:aa:
61:1d:c6:f8:af:a1:c5:30:6a:64:e4:fd:c1:85:45:
80:05:d6:00:dd:f1:1f:27:7d:e9:72:3b:f8:70:96:
78:b4:76:fb:60:cc:44:28:e3:8e:75:9a:75:7d:5a:
68:34:07:06:7d:67:13:b4:1d:0d:65:18:9f:25:9c:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:C1:1B:9D:58:EC:3F:ED:55:B1:C7:70:88:E4:A3:54:10:E3:91
X509v3 Authority Key Identifier:
keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:04:9d:cd:b1:ba:01:3c:0c:65:39:ca:5a:6e:84:19:0a:1d:
51:3b:6c:28:9f:2d:ed:a6:69:07:e3:48:cb:c4:f0:73:8c:80:
df:1b:cd:cb:c6:74:85:6e:7a:78:15:e6:7d:c9:97:1a:b4:81:
d4:ca:4e:83:e2:a5:7b:62:a7:b6:d0:2a:c6:af:46:45:3e:4d:
fa:97:67:1e:07:ae:aa:f6:5e:68:f1:50:25:29:cb:de:58:92:
cd:38:95:a8:5c:71:b6:5d:e0:50:97:d7:b0:62:15:d8:7c:0b:
b4:0f:fb:27:f8:ea:14:8b:69:ee:04:c6:fc:6b:c0:15:a7:65:
ec:1f:a7:e7:87:dc:8a:43:f9:1f:47:ef:da:c3:63:18:ac:b5:
db:b5:7c:4c:5a:c8:02:c2:3d:5d:65:44:f2:02:fd:d9:03:48:
d7:a6:04:00:64:ba:54:94:69:b7:fd:1c:1e:e8:d1:f7:61:67:
1a:01:89:a0:26:22:f8:08:f0:d2:ba:9e:a2:4b:03:b3:92:e2:
f9:b9:f0:50:f8:bd:59:09:87:d9:bb:90:5c:33:07:27:a8:e5:
ae:5a:8b:f4:e7:49:56:f3:e5:1b:48:3a:4e:40:6d:b0:78:f1:
43:15:97:d9:21:a1:5e:b9:79:55:1a:b5:5f:f4:a1:26:b1:8c:
10:9b:27:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6X1mRhFr4j3g+s9F+WdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjhlZDk4NWVmMjAzNGU4ZTMwN2M0NDdmMzQ5NmMzMmFk
YWQyYzgwHhcNMjYwOTIxMTcwMDMxWhcNMjYwOTIyMTcwMDMxWjAzMTEwLwYDVQQD
EyhkNzFiYzExYjlkNThlYzNmZWQ1NWIxYzc3MDg4ZTRhMzU0MTBlMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rC8eJ8WaACMyDFtKQqywqr+8RCx
jRgyXOTR5YzT+RZc4EUGI1st6tPw28uqzpK9EpjL7dWAszqZemcB0zOunKrqBmdR
eF5ikZ6BtwtLwU9fDgC1c5ENBZ0skMYKwc1QN2lgDput+VJX67b4WmKzMtO7bBOi
SwoYTE6xXyMsOtNz3E68TOO/RdT00/IEAdGPLlEAWmXBtWGIxRw0De0zHQ1goyeI
PFLo6dmvtekPKgOS9jGaGRJ/ECkX6FZs/pjTi6phHcb4r6HFMGpk5P3BhUWABdYA
3fEfJ33pcjv4cJZ4tHb7YMxEKOOOdZp1fVpoNAcGfWcTtB0NZRifJZxcBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcbwRudWOw/7VWxx3CI5KNUEOORMB8GA1UdIwQY
MBaAFAa47Zhe8gNOjjB8RH80lsMq2tLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQt
ZWJlYjlhOTkxNDg4LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQtZWJlYjlhOTkxNDg4
LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgSdzbG6
ATwMZTnKWm6EGQodUTtsKJ8t7aZpB+NIy8Twc4yA3xvNy8Z0hW56eBXmfcmXGrSB
1MpOg+Kle2KnttAqxq9GRT5N+pdnHgeuqvZeaPFQJSnL3liSzTiVqFxxtl3gUJfX
sGIV2HwLtA/7J/jqFItp7gTG/GvAFadl7B+n54fcikP5H0fv2sNjGKy127V8TFrI
AsI9XWVE8gL92QNI16YEAGS6VJRpt/0cHujR92FnGgGJoCYi+Ajw0rqeoksDs5Li
+bnwUPi9WQmH2buQXDMHJ6jlrlqL9OdJVvPlG0g6TkBtsHjxQxWX2SGhXrl5VRq1
X/ShJrGMEJsn+w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:43:31 2026 by rpki-client